See I told you I was clueless hahaha okay.
So on my router I'm starting over, enabling VPN SERVER (not client) on my TPLINK AXE5400 with the service port matching the NVR 37777 TCP (correct?), generating a certificate and exporting the config file from that. Then installing that on my phone's...